| Current Path : /proc/thread-self/root/home/ift/mails/36/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/36/1540074315.zrspam.368676_2018_10_21 |
From Martindoyo@buycatalinatours.com Sun Oct 21 00:25:15 2018
Return-Path: <Martindoyo@buycatalinatours.com>
X-Original-To: tjungblut@ift-informatik.de
Delivered-To: tjungblut@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id AF92B3D200020; Sun, 21 Oct 2018 00:25:15 +0200 (CEST)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Sun, 21 Oct 2018 00:25:15 +0200
From: "Nathalie" <Martindoyo@buycatalinatours.com>
To: "Nathalie" <tobias.jungblut@ift-informatik.de>
Subject: *****SPAM***** What such a gorgeous man is doing here?
Date: Sat, 20 Oct 2018 21:09:55 -0700
Message-Id: <5DE08BF9.0AE10F53@buycatalinatours.com>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: *********************
X-Spam-Status: Yes, score=21.7 required=5.0 tests=BAYES_99,
DATE_IN_FUTURE_03_06,DIGEST_MULTIPLE,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,
MIME_BASE64_TEXT,MIME_HTML_ONLY,PYZOR_CHECK,RAZOR2_CF_RANGE_51_100,
RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_IN_BL_SPAMCOP_NET,
RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L5,RCVD_IN_RP_RNBL,RDNS_NONE,SPF_HELO_FAIL,
T_REMOTE_IMAGE,URIBL_BLOCKED,URIBL_JP_SURBL,URIBL_PH_SURBL autolearn=spam
autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5BCBAB4B.C86C89A0"
This is a multi-part message in MIME format.
------------=_5BCBAB4B.C86C89A0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hallo! Do you want fuc**k me? How about to meet a hot girl?
I am free for you now ;) Would you like to chat with me baby? http://getnow.su
[...]
Content analysis details: (21.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.6 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URIs: getnow.su]
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: getnow.su]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: getnow.su]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?197.231.151.91>]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[197.231.151.91 listed in bl.mailspike.net]
3.0 DATE_IN_FUTURE_03_06 Date: is 3 to 6 hours after Received: date
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=buycatalinatours.com;ip=197.231.151.91;r=h2486555.stratoserver.net]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
1.7 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding
1.4 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[197.231.151.91 listed in bl.score.senderscore.com]
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.3 DIGEST_MULTIPLE Message hits more than one network digest check
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.0 T_REMOTE_IMAGE Message contains an external image
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5BCBAB4B.C86C89A0
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from buycatalinatours.com (unknown [197.231.151.91])
by ift-informatik.de (Postfix) with ESMTP id A92DC3D200005
for <tobias.jungblut@ift-informatik.de>; Sun, 21 Oct 2018 00:25:12 +0200 (CEST)
Received: from unknown (HELO webmail.halftomorrow.com) (Sat, 20 Oct 2018 21:09:55 -0700)
by qnx.mdrost.com with SMTP; Sat, 20 Oct 2018 21:09:55 -0700
Message-ID: <5DE08BF9.0AE10F53@buycatalinatours.com>
Date: Sat, 20 Oct 2018 21:09:55 -0700
Reply-To: "Nathalie" <Martindoyo@buycatalinatours.com>
From: "Nathalie" <Martindoyo@buycatalinatours.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
MIME-Version: 1.0
To: "Nathalie" <tobias.jungblut@ift-informatik.de>
Subject: What such a gorgeous man is doing here?
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: base64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------------=_5BCBAB4B.C86C89A0--